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\TTFNTION: Boj^rd of Patent Appeals and Iiiterferefices 

APPEAL BRIEF (37 CF.R. § 41.37) 

fhis bncf is m furthcuiiKC vif rhc \otKC of \ppcai, tlScd m this case on Noxt'snbci 20, 2U'*<i, and 
in tL'sponsL' the Noikc oI Panei Decision fTOjii pTe-Appt-ai Rficf Re> 5f\% rnadod Docfuibct 2o, 

2006, 

Hie tce.s Ecquitcd under 4} I P, and m\ Ecquucd petition tot extension of ttme for tiling this 
brief and foes theieiot oie dcait with m the acLomjioinint? TR \N's\nTT\f . OF APPEAL 

bri:ef'. 

fills biiet ecmtains these itents under die toiiowing headutsis and m ihc order »et forth beitw (37 
e i R Ml >7ic}U)) 

I Rl M P\K]\ IN INTLRLST 

ii RiM \ 1 VD VFPi M S AND iN 1 i'Ri FRFN{M\S 

m srvii so^ ci \i\is 

IV STATL S OF AVIFNDMFNTS 



(hnup Ati I nu 2n i 

\ vamtnei LaftJiiiia Chnsttan A 

Date Januan 22, 2(H)7 



\ SlMNiAR^ or a AIMFDSI BIR TNf\TTrR 

Vi (jROl \DS OF R[ )i rriON 10 Bl \ir\ \l WFD o\ \ppr \I 

Mil (I \iMS '\V?h \Dl\ 

\\ FMDFMr \PPF\DIX 

X RL! \1 LD PR{K1 LDi\0 \PPi NDiX 



1 he fmai page of this hrief bears the piaetuioner's siiiuaiuie 
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I REAL PARTY IN INTEREST (37 CF.R. § 41.37{c){l)(i)) 

The reai party in interest in this appeal is McAfee, Inc. 
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11 RE LATED APPEA ES AN B INTERFERENCES (37 CE.R. § 4L37(c) (I 

With respect to other prior or pending appeals, interferetices, or related judicial proceedings that 
will directiy affect, or be directly affected by, or have a bearing on the Boai'd's decision in the 
pending appeal, there are no other such appeals, interferences, or related judicial proceedirigs. 

A Related Proceedings Appendix is appended hereto. 
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111 STATUS OF CTAIMS (37 C.F.R. § 41.37(c) (l)(iii)) 

\. TOTAL Ni \mm OV t L VIMS l> APPLK VnON 

CLuius nufie.H''I'if<'>5t>«" f^'t' 1-0 iJ-l^J"-2J 2H-^C) and J 
STA'H SOK ALL TUL CLAIMS IN \PPLK A'lION 

! ( hnnis v\!thdi<i\\n fion-) considouuion None 

2 Ck^ims p«i)d}i)g li-n J7-2i ,,nLn8-4i 

3 Claims alUnvcd \onc 

4 Ciaims rejected i U - 1 ^ ! 7-21 , 28- H) and ?fel-41 
Cliims cancel icd 1" It^, 22-2", and '5 1 

C. CLAIMS ON A PPEAL 

The claims on appeal are: 1-9, i 145, 17-21, 2S-30, and 38-41 
See additional status information in the Appendix of Claims. 



JV STATUS OF AMENDMENTS (37 C.F.R. § 41,37(c)(l){iv)) 



As to the status of any amendraent tied subsequent to tinai rejection, there are no such 
amendments after final. 
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V SUM:MAR:Y of CILAIMED SUBJECT MATTER (37 CF.R. § 4L37(cXl)(v)) 

With respect to a summary- of Claim I, as shown in Figures 3A-13, a secret updating method is 
provided in an environment thai includes a plurality of users, where each user possesses secrets 
that are shared by respective sets of the pkirality of users, in use, at least one compromised 
secret knowti by at least one evicted user is updated usitig at least one non-compromised secret 
that is not known by the at least one evicted user. Additionally, the updating does not use new 
secret information. See, for example, page 15, paragraph [1062]-page 16, paragraph [1064]; 
page 17, paragraph [1068]; pages 17-18, paragraph [1070]; and page 20, paragraphs [1080]- 
[1081] eta!. 

With respect to a summary <)f Claim 13, as shown in Figures 3A-i 3, a keving meth<xl is provided 
in an environment that includes a plurality of users, uhere a llrsi user possesses a set of keys, 
which includes a fust key that enables secure conmutnication among a set of users, and where 
the set of users includes at least the fu st user and a second user in use an updated fust key is 
determined upon eviction of at least the second user using intorniation that includes the first key 
and a second key. h\ addition, die second key enables secure communication among a subgroup 
of the set of users. Moreover, the subgroup does not include users subject to the eviction 
further, the updated first key is determined using a finiction having the following properties- (I) 
kno\\ ledge of the updated fust key does ni)t gi\'t* knowledge oi' die llrsi ke>' i)r die second ke>, 
(2) knowledge of the first key does not gi^•e any knowledge of the updated fust key, and {?) 
knouledge of the (list ke\' and tiie updated (list ke\' does not give any knowledge of the second 
key. See. for example, page L^. paragraph [jno2]-page J 6. paragraph [jno4], page 17, 
paragraph [ i 068], pages 17-18, paragraph [ 1 070], and page 20, paragraphs [ 1 080]-[ i OS I ] et al 

Widi respect to a sunmiary of Claim 2<S, as shown in Figures 3.A-13, a keying method is provided 
in an enviionmeni having a plurality of users, where each user is capable of storing a set of kes s 
that enable secure communicaiion among sets of the pluralitx of users, (n use. tlrst information 
is distributed that enables users to update, after eviction of one or more users, a set of 
compromised kevs that are known to the one or more users wittiout receising new key 
infonnation in addition, the update does not include new secret infonnation See, for e\a.mple. 



pdiiu pai.i^i.iph j Uj62j-page pds agiapli |iO(T||. page 17, pds agiapli |iO(^Sl. page^ i7-iS, 
paiagiaph [l07Uj jdJ paae 20, paragraphs [lUSfj^lOS! j et a! 



\Vn!i icspcct to X.1 sumni.i[-\ vif Ciaun 18 as sh!n\n m f-iguics a scctt*r shatniL; .sNstcni fs 

ptoMded In usf a ke^ seisci disttthutes sectoi nUoiniatton to a plutahts ofusojs vxht-ic oacii 
uses IS sent sccieLs th.it dn. sluued In tt'spt^tue ^.ets of the piuuilitx uf ust'us h\ .iddition the k.L\ 
stfutfi is optfiau^e to update at least out; compromised secret I noun bs at !eas{ one e\joteti user 
usiny at least one non-compi{.>miscd .scciet that is not Inown b\ the at !eai>t one evicted user 
rmihej, ihf update does not mUude new secret mforniotion bt-e tot cw^mple potje 1'^, 
pajagjaph nOo2|-pdtie lo pdi<ii-fi<ipb j i (>b4J pai-fe17 p<it.%'tapb n06S], pages T-JS pfuagiaph 
1 i070], and pai^e 2(\ paragraphs 1 108n]-| i08! ] a ai 

With respect to a stimmarv Ci<3im i*-', as »ho\\n in bsgmes ?A.-i.\ a ccimputer progsam product 
IS pfo\jded in use compiitcr-tcadable pioutam codt. tauses d cotiiputcr, in an ciix nonnu'nt that 
rnchrdes a pkiidhtx of users \%here each itsoi possesses scoeis that ate sbated b\ tespci^trxe sets 
of the tisejs tti tipduk at k\jst one contpromised secra kno^\n b\ at ieas{ one exietcd user usijiii 
at least <:ine non-c<:impfomfscd secret that rs not ktu>\\n b\ the at least vine e\ictt*d itser \ 
Ciinipittet -usable nu'dnnn is also conilgutud to stiiTt. the cor^iputet-feadablt. piogtani ^.odes hi 
addition t!iL update dues not mciudc new secret mfonnation See, tui evimpie page Is, 
paragraph I i0o2|-page k\ paiayiapb [1('04| paye 17 paiagiapb | hK>Sj, pa^es 1 7- IS, paragraph 
[ 1 07( J], and paiif 20, pai agi aphs f 1 ( jHO]-[ i 1 ] et a! 

Ot'untise Jbe abo^e ciJanons aie mete]\ e\amp!es t)f jhe abo^e claim lanytiage arui should not 
he eonstiifed as lunrtuig m aiiv manner 
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VI GROUNDS OF REJECTION TO BE REVIEWED ON APPEAL (37 C:.F.R. § 
4L37(c)(IKvi)) 

Following, imder each issue listed, is a concise statement setting fortJi the corresponding ground 
of rejection 

Isi>uc I the fcxaminei has lejcctcd ( laims H-\'\ i'>-2K and 40 under I ^ C lf)2(e) as 
bfinji anuupalcd bs (jUiiddxdh et ai [l S Patent No f> 041 4^7) 

Ksue 2 I he I \<)muief ha\ iCjtYled ( hiuns 2R-id undcj T S V KCie) as bang anttcipatod 
h\ Dondetieta! (I S Pjtent \o o 240 

Issue > The f xanimet has icjec-led (.iamis and 30 uiides ^^'^ I SC 102<^c) as being 
arni^q-iatcd b\ Kadansk\ oi al (( S Patent \o o 2'-^^,3f>U 

i&sue " ! liic bvannnci has i elected CI ami 7 undci ,5^ I S C idif-a) as bcfng anticipated b\ 
(hmdaxeili et a! {{ S Patent \>i o,'-Mi,4';7) tn oi" Talsuda ut al {I S Patutit No 

6, i 78,244 >. 

Ksue 1 ht* Lxamtncf has tcit'cttd ( Utmis 17 18, and M undt'i l'^ I SC tO>(a) as htmg 
antteiP'^l^'*-^ ^'"^ CuJodaseUi et ai {\ S Patent No 6<Mi 4^") m \ieu of Dondeti et a! i\ S 
Patent No. 6,240,188), 
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VI I VRGl' M r (37 C.l. K. § 4 L37{cM \ H^ it» 

1 he d'dims of the giollp^ noted bt;lo\s tio not ^t^tnd or fail together. In the present section, 
appcli.uit c\pi.iins whs tht- claims vif CvK!i yuuip .uc Iselieved to be separately patentabie. 

issue if 1 : 

1 he fc\antHtci has leicctcd Ciauns i-o 8-1", aiid 40 under 35 U.S.C. 102(e) as being 

anttapated b\ GundascHi t-t al (I S Patent \o c>^M1,457), 

(.rfoup I Ckiuus !-6, \~') amU !-l2 

With le^pcct to independent Claim I, die bxaminer has relied on the toilowing excerpts from 
Gundaseth to maK' a puor ait shuutn^^ of appcliaiu's claimed technique "wherein said updating 
does not use ne\% seeiet mfoimatton 

3 ' " 1 .. ;^ , upon dete3:mining that a f irsst departing 

rnerobtsr has left the uycond jnuiticast group a private imiiticsst group 
non-zero random xnteger xs selected A second multxcast group exchange 
key is then generated based on a private multicast group non-zero 
random integer, a public non-r,ero tnteger and a public prime integer. 
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■:o sa(::u rel co;!i3iti.jni cat;e wich aa<:;h cchei', Ik «<kS;i.t;:i.ois , the new xaeFSibers 
raay be a dial t ted into the group u si sag the laethod described above. 

For example, referriag to FIG. 3S, if: Carol 314 leaves the multicast 
gro'Ljp 328, taa renriai nirsg xaeFSibers w;i.t;h.i.is :£t:ult:.i.cast group 330 xaay 

algorithm, I;i addition, the multicast group 330 may compute a multicast 
group 330 exchange key for adciitting new meisbsrs into the multicast 
group 330. For example, iipon Carol 314 leaving multicast group 328, 
n:ailti<;;a«t group 330 HT.ay cojrinatiicatie with each ot:be): to compu'te a new 

additiois, the rtsultic«st group 330 K\ay compute an exchaisge key K3 ' «s 
previously explained above, for admitting new members into the 
multicast group 330. For example, the exchange key K3 ' may be compisted 
as K3 ' - { g . sup . k4 mod < a 5 } . " i Col . 11, li.ne s 6-3 9 } 



Appelhint respectfuiiy asserts that the above excerpts cited by the liLxaminer actuaily feach away 
i\om appeiiant's specific claim language. In particulai; Gundavelli discloses that ''upon 
determining tlmt a Urst departing member has left the second multicasi group a private multicast 
iiroup non-zero raridoni irvlesier is selected li'ttrtber, (juudavelli discloses that ''[a] second 
multicast group exchange key is then generated based on a private multicast group non-i^ero 
random integer, a public non-zero integer and a public prime integer." 



Thus, in Gundavelii when a member has left a groiip, new secret information is utilized in 
creauiig the exchange ke\, including 'a pnvafe multicast group non-/eio jandoni mtegei a 
pubiic nun-zeru integer and a pubhc pnme mteyer,' as e\pres.s!v disclosed Appehant on the 
oiiKr hand, claims that the "updating d(.>cs mjt use new Stcrei mtotmation " (emphasis added), as 
clanned. 



In the Office Action maded 0" 24 0b the iAamsner has 'interpreted secret as ke> and new 
secret informanon as generating a new ke^■ " Kirther, the b-xaminer has aisiued that "Gundavcili 
st:ues m iht. c-ited sections that a new group is generaied using the tfadittona! DitTie-HeSlman 
approdcb. \>h!eh ts lo generate a group key using the membeis alieadx existing ke\s [and ihat 
tjherefore, Gundaveili discloses updating a secret without using new secret information."' 



Appellant tespectiulK disagrees and pomts oui the steps of tiie traditional Diffie-Beliman 
approach as Jound rn the (iunda\elh ieJerence 



-i ' ' J * , , each 

select random iax^e numbers. & and b, wha^ch arc kopt srecrcit t 



\.s emphaM/t\l tn the above 0\ceTpt die DiOle-I L'lhnan appu)<)Lb loquucs thai the partiLspauts 
tvKh sei«t-{ random hiiLit; nuinbcis ti aiul b which die k«pt s«i.iti <t;niphus}\ added) 
Furthcmuire GustclivtIN state-, xlut the icmannnL; menibei-, wuhnt muitieast liuutp >ifi [n^n 
t_itabiisli a neu stcici kt_> usinu the ti iduioiial Oiitlc-I iLllmdii dlgonthm {i.o\ il hfit_i t-i*^) 
di)J that tKLuidiiiii to [thf Diltle-1 iLllnidi)] methvxi eas-K [of the pditaipanisj seket taikiuin 
lart^c nunibcts a .ind b \shivh aic ktpt bt;>,iet (emphasis added) Ihus jnOunda^eili \shen a 
mcmbt! has Ictt a yroup new stcfct intoiniarn')n namcK fandojn Luyc nunibtis ajc utiU/cu m 
ctL.UHig the new secret ke^ Appellant the odiei hand tlainis that the updating does not use 
iKM^ st'Ltct iDti^nnation (t'inphasjs addi-dt aseiaifJied Ckails utth'tng new secset ii^lunnatinn 
when a member Seases the yioup, as tn CfUudaNelh tads lo disclose ana e^en 'cai,hi."i anai Worn 
" not usiingj new secret informatioif ' (emphasis added), as claimed by appellant. 

The Examiner is rersiinded that a claim is anticipated only if each and evef\' elersient as set forth 
in the d.Mm ts iound euher e^piessls oi inheteiuK des4.nbed in a .single puot art leterente 
f enk,tiLKfI/ho^ 1 ! moil o (>fra!ifomia.^\4 F 2d o28 f^l i 2 I SP02d lOs 1 lOs^ (hed 
Vn M{.KC(.>\ci the identical in\ention must be shown m as complete detad a» contained 

in the clami Kn hanhoii i Suzuki Mi)io>- Co SdS F :d 122(\ '>l'SP02d >, l'->20 {\ cd 

Cn 1">8'-^) The olemenis must be diraniied as sefjuiied bs the claim This ciueiion has smipK 
)Hit been n\tt b\ the piioi ait icfcreiice rehcd on b\ the f \an\ir\ei, as iioted ahose 

Lmmp »2: Claims I3-I5. and 19-21 

W iUi lespeet to independent Chim CK the i Aaminer has ayatn lehed on (. ol 5, hoes 47-0 > and 
Col n, iincs 0-^'* ffon) Gundavelb (repfoduccd above) to make a pnoi art sitowsni: of 
appellaniX claiitied ttvhntquc 'wherein said detennmtng uses a lunction ha\tng the foHowmg 
propeilies (!) kntnsledge t)f s<nd updated fust ke\ (ioe.s not gi\e Inowleiige of saul fust Les ot 
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said iccoful kcs (2) knou ledge of said fusi ke\ docs iioi gt'.t. am ksKmiedge of sdsd updated 
ftisi ke\ and (3) kiumledge iif said fn'^t ke\ and s.ud updated fn'^t ke\ dues iu)t jiue dm 
know ! ediie of sai d st-ooiid k e\ 

Appellant tespectfulh asseits diat stniph nowbete m Gunda\e!it is tbete atu dis^loane that 
isiiowledge of said lust ke^ and said updated tlusL les does not give ans knowledge of srfid 
seeoud kes ' as speCitlcaSK ckiuned b\ appeil.mt Intact appeHaut notes that such excerpts on!v 
disclose utilizing random mtciicis t{.> cieate an updated kex (see emphasized excerpt abo\e) and 
using the lidditional Difflf-llellnian algombm to CJeate a m\\ shared secret kes (.leatK sut^h 
tedcbtngs do not e\en suggest that ' knowledge of s<nd fust Le\ <ind said updated fust Les does 
ftoti^fseunx kno\siedge ofsaid sccottd ke\ as speedkalK elannt-d hs appellant 

In the Oftlec \ction maded 07/2 4/0o, the bsantmci has argued th<3i "[appellant] claims 
descripti\c nutctta! that is the teasonnig bchnid updating the c-oniptonnscd kes [that] U allous 
foi the updating vii die giviup kes vMthout eonipsonusuig ans member ot^ the gump s ke\ [and 
thut {jheicioie, (mndaxelh discloses kiumkdtie of the fust ke\ artd updated fust ke\ does not 
gi\ c am kno\\kdge of saui secvind kes , theiebs making the kes s resistant to toliusjon attacks " 

Appellant respectfulK dfsagtees dnd a^^sens that m (mndasellt a n^vs seci^t kes i\ e thud sluied 
seciet kes ) is generated for a gioup m \\b\ch a member has lett The new secret kes is geneiated 
uultzjng an exchange kes th^u js hastu on uitcgtus (j e ntm-zcio tandont mteget publtc non-zeio 
integer, and public pttnie integer » and a second shated secret kes that s\as used bs the group that 
inc!u(!ed the menUiet that left (see paiiiculails Col o( (iunJa\elli) Ihus in Uunda\elh 
knowledge of the new seeiet kes mheientls include'^ knowledge of the second shared ke\ sutce 
the niembeis aie the same except for the member that left 1 heiefore, Oundaselli teaches asvas 
itoni appellant a claimed ^knowledge of said tust kes and said updated fust kcs does not gi^ e 
an\ knou ledge of said second ke\ (emphasis added), as specrtlealK claimed b\ appellant 

\gain the toscuomu anticipatnw cntenon has simpK not been met bs the abose tefeicnce as 
noted above. 



Group «3: Claims 10 ami J 6 



- 14- 



Appellant respectfii!!y asserts that Claims 10 and 16 were cancelled in the Substitute 
Amendment dated 5/10/2006. 

Group rl4: Ckam 40 

With respect to dependent Claim 40, the lr:xaminer has relied on Col. \ I., lines 6-39 of the 
Gundavelli reference (reprciduced above) to make a prior art showing of appellant's claimed 
teclniique "vvl?erein said non-com promised secret utilised for said updating is known by ali users 
in said plurality of users and is not known by sfnd at least one evicted user," 

Appellant respectfully asserts Uiat {lie excerpt from Gundavelli relied upon by {lie Examiner 
merely disckises that "when a niember..lt\wes the multicast group, a nev\^shM.'^d..secre^^^ 
tjienerated for coimnunicatine between those members that remain in the multicast group'' 
(etnphasis added). Furtbej-.. tmndavelli discloses that "when a IM'SPII..).^::?!.^'^.?....^].!^:^.^^^^^^^ M^rl 
hMfM..3.^!?S.?LMy. fs eMf!]?J.i.s!.l«l usiiig the traditioruil Diffie-Mellman algorithm" and ^ jtjhe 
rental ning members may then use tiie newly established shared secret kev to securely 
.'i-iMlOlULli.W.fU^'. with each other" (empfiasis added). Mowever.. die mere disclosure dial when a 
member leaves a group, a .new..s}iared..seg;^^^^ for the remaining iuembers to 

securely communicate, as in (jundavelii, simply tads to even sugge,st the u,se of a non- 
compromised secret- much less a "nun-compromised secret [thai is] utilized for said updating is 
kUQ.VM..bx..<dl.y..?.tls in said plurality of users and is .npt.koown by said at least one evicled.usti" 
(emphasis added), as claimed. 

Again, the foregoing anticipation criterion has simply not been met by the above reference, as 
noted above. 

Is,sue 2 



"file Examiner has rejected Claims 28-30 under 35 U.S.C. 102(e) as being anticipated by Dondeti 
elal. (US. Patent No {>>10 J SS). 



Gnmp MI: Claims 28-30 



With Tt\specT to indt-pt-ndt-nt O.iioi 2$, the IXaminci has leht-d on the foilowmu exccipt fiooi The 
Dt'incicti retVrt'ncc to make a pn<.>r art .sluiwing ot\ippt*llant\s ciaijned technique '■wherein saui 
update does not iucludo neu .soeret nUornutton " 

"B, Leav« Protocol 



It send tlie ne^ ke\s to the members of its I'ey 
cissociatxori gzoup <and th«"i ax-** responsible tox propagatxnci th« net ke i-s 
to the appropriate members m their subgroups 



- 16- 



Appcllani ic^pcctfiiiK asserts that the cxccfin from Dofulcti relied upon h\ the F.xainincr fuerclv 
discloses tlun "[wjhen a..n\tl\!i?fci.22.jeave^^ it'^ jteigiibor ijiiitM<?.'?..l[.'.<?..ld-^j^yf.ng,|u^^^^^^^^ and ibat 
'"['H ;>.t^Ods.l}ie.xitf.\s..keis to the niejnbers of Us ke\ .ishocuuion g.aH.[p and ihev <nt- respoiusiblt; for 
propayatjrii; the new keys to the appR>pnate members in rhcir suhuroups' (emphasis addt-d) 
Ucmover, the nu-te disclo-^ure that new keys are sent to the nienUiors of the gn>up when a 
tnenibes k'a\es, as in Dundett. sitnjiis lails to specitlcali\ suggest a ciaitned lechniciut' \vhett'in 
said update does not include ne\s secret information " temphasis added), as claimed by appellant 

Again, the fort-iioing anticipation critenon has simply not been met b\ the above reference, as 
noted above. 

Issue #3: 

The Examiner has rejected Claims 38 and 39 under 35 U.S.C. 102(e) as being anticipated by 
Kadansky et al, (U.S. Patent No. 6,295,361). 

Group j;7: Ciaijm 38 ami 39 

With respect to indLpcndLni ( launs "^8 and S*-^ the l\dnunef lidS leited on Cd 1, hni. (^o-Ci)! 2, 
line f>l tn Kadansks to raai e a pnor art showing of appellant s clafnied technique wheietn said 
update d{.>cs noi uKUidc new scciei information " 

appellant lespectfitNs asseits that stich e\ceipl dk)iig with the enJue kadansk\ lefereiice onK 
rek-jtes to a method of distnbutmg a new group lev, but doe'^ not esen '^ugeest how such new 
uioup lc\ iS created thus, ^miply nowheic ut kadansi) is thctc anv teaching of an "update 
[that] does not melude nt.\\ seciet mfoinuition' wheic suel) upddte is used ibi updating ' at least 
one compI^MU^sed seDCl known b\ at least one exteted usei ' {emphasis added) m the context 
claimed by appellant. 

Again, the foregoing anticipation ciiterion has simply not been met by the above reference, as 
noted above. 
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!ssue.#.4: 

I'hii Examiner ha;> rejected Claim 7 under .^5 U S C l^Kha) a;> being anticipated by Gunchnelii et 
al. (I i.S. Patent No. 6,941,457) in vit-w of Tai<eda et ai. (IJ S Patt-nt No t-,! 78,244). 

( jf'oup -ri: C/min 7 

With respect to dependent Tlaim 7, the Examiner has reiied on the tblkwing excerpt in lakeda 
to makt* a prior ait slioxving ofappeHant^s clainit'd technique ■^vhert*^n said updating occurs on a 
periodic basis." 

'M r; i.L;<? k>^:y ;■;.[? c. r i. L)i;" .i 'ici pi o':.'^:':;^;?. e, the session key is updated 

right after receiving the session key. i-i-iv;^- ve?: , fj)!^;- st;'.?.;..i.^V: k^y ^;■f;L.- 

Appellant respecttuliy asserts tiiat such exceipt relied on by the Examiner does nt'jt teach 
updating at least one conipromised secret "on a periodic basis/' in the context claimed bv 
i"ipp£;llant. in.stead. Takeda only disc!ose,s updating a session key in response to certain 
circumstances, namely "right after receiving tiie session key," "uhen the communication is 
interriipted." and "v/hen a predetermined time period !ias passed aiier receix'ing the session key." 
Clearly, such circumstances do not any sort of periodic..basis. in the context as cUiimed by 
appellant 

estabiish a prima favK' case (if {.>bx i(>usness, three basic criteria must be met First, there must 
be some suggestion or motivation, either in the references themseives or in the knowledge 
generally available to one of ordinary skill in the art, to modify the reference or to combine 
leference teachings. Secrmd, tiiere must be a reasonable expectatirm of success. Fitially, the prior 
an reference (or references when combined) must teach or suggest all the claim limitations Tiie 
teaching or suggestion to make the ciainied combination and the reasonable expectation of 
success must both be found in the prior art and not based on appe!!ant\s dtsclosuie. //; /v 
WicckMl E,:d 488. 20 USPQ:d I4.?8 (i-ed.Cir Vm). 
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Appellant respectfully asserts thai <i\ ieast die third eieniein of the prima facie case of 
obviousfjess has riot been meU since the prior ait refereinces. \shef5 combined, fail to teach or 
suygest ajj of the ckmn iimitaTions, as tioted abo\e 

Issoe..#..5; 

The Examiner has rejected Claims 17, 18, and 41 under 35 IJ.S.C. 103(a) as beitig amicipated by 
GundaveMi et al. (U.S. Patent No. 6,941,457) in view of Dondeti et al. (U S. Patent No. 
6,240;i88). 

Group #/.■ Chum 17 and J 8 

\ppellant iCspectfulK asserts that such claims arc not met bv the prior ait for the reasons argued 
with tespec-l to Issue " 1 Otoup 

Xi^asn, appcNani iesp«ctfulh asscits that ai leasi the thud element of the prima facie case of 
obxioiisncss has n<.>t been met since the prior an lefcrenct-s when combined, fail to teach or 
suggest ai! of the cirftm hnutanous as noted rfbo\e 

\ppellant jespcctfuiK asseits thai such claims ate not met h\ the prior art for the reasons argued 
with respect to Issue #1, Group #4. 

Again, appellant respectfuiiy asserts that at least the third element of the prima, facie case of 
obviousness has not been met, since the prior art references, when combined, fail to teach oi' 
suggest ail of the ciaim limitations, as noted above 

In view of the retnarks set fortb iiereinabove, ail of tiie i ndependent claims are deemed allowable, 
along with any claims depending therefrom. 
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Vm CLAIMS APPENDIX (37 C.F.R, § 4137(cKl )(viii)) 

The text of the claims involved in the appeal (along witli associated status iirfofmation) is set 
forth below: 

1 ( Pre\ inusls Ptcscnted) In en\ ironiuent Lhdt irKiiukh a pluId^lt^ of iLset s w Ijctcin each 
uses possesses secrets Uiat aie shareti b\ iespeotne sets ufs.nd pi urai us of users a secret 
updating method, comprising: 

(a) updating at least ont* ooniptomiscd &ccit*i known b\ at ka&t one e\ ictcu user u&fJig 
at le.jst one non-conipioniiscd secret that is not I noun hs said at least oui: e\ icteJ user 
wheretn s<itd updattng docs not use ue\% .secret mfoim.itton 

2 (Oiigmai ) The method <>t claim 1, xsheiem said updating comprises updating a pluiahtx 
of compromised secrets, 

? (OiJUinal ) Ihc method of claim U wheieui said updatuii; comprises updating all 
compromised secrets. 

4. (Original) The method of claim 1 , whereiti said lipdatitig comprises updating at least one 
compromised secret knowTi hy one evicted user. 

5. (Original) The method of claim 4, wherein said lipdating occiirs upon an eviction event. 

6. (Original) The method of ciaini 1 , wherein said updating comprises updating at least one 
compromised secret known by a plunility of evicted users. 

7. (Original) The method of claim 6, wherein said tjpdating occurs on a. periodic basis, 

8. (Original) The ,method of claim 1 , wherein said updating comprises updating a 
compromised secret ttsing one non -compromised secret. 
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'■'^ (Ongnui) The nieliipd of claim 1, uhcictfi said updditiig compnses updating a 
cdiupionused secit'i known b\ a set oftiscts uw]ii a non-conipiotufsed secit't oi d suliiZTOup oi" 
said set of users, 

10. (Cancelled) 

1 1 , (Original) The method of claim L wherein said compromised secret is shared by said 
plurality of users. 

\2 (Ongtnai » The method ot tlain) i Nsherem s^kI secrets enables secure connnuniLdtion 

n (PitJMou'^h Preserttedr !u an t;u\ uonment tlidt iULludes a pluialit\ ofuseis whererua 
first Uvser possei>scs a i>et of ke\ .s, said set (>f kes s inciuding a fu>i lc\ that enables sccuie 
conmiunication among a set of users, said set of uses s mUudtng <i\ least said tltst nsei and a 
soLond user d ke\ mg method eonrpusuii? 

(u! upon esictrtm of dt least said second user dueinnninu dO updated fust kes usuiii 
informatum ih^^ includes safd fust kes and second kt*\, whcfem said sec<:ind ke\ enables secure 
Ciinununri-fUron dnrong a subgi oup of sard st. t of itsets, uhetem sard subgroup does not include 
users subject to sard evictio.n". 

\\ beieut said determiiirny uses a funcTioii has ing the folhnx mu properties (hi no^\ ledge 
of sard updated tlisi kc\ does not gi\c knowlcdtic i>f sard tlrst kt> oi said seci>nd ke\, (2) 
knowledge of said ilrst ke\ does not g!\e ans kiiovs ledge nfeard updated fitst kes, and 0> 
knowledge of said first key and said updated first key does not give any knowledge of said 
second key. 

14, (Original) The method of claim 1 3, wherein only said second user is evicted, 

15. (Original) The method of claim 13, wherein said second liser and one or more other users 
in said set of users are evicted. 



16, (Cancelled) 
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1 7. (Previously Presented) The method of claim 13, whereiri said detenniiiing uses; a one-way 
function. 

18. (Original) The method of claim 17, whereiti said updated first key is equal to F(first key, 
second key), vvherein F() is a one-way function, 

19. (Original) The method of claim 13, whereiti said determining uses only said first key and 
said second key. 

20. (Original) The method of claim 13, wherein said subgroup includes only said first user. 

21 . (Original) The method of claim 13, wherein said subgroup includes a plurality of users. 

22. -27. (Caricelled) 

28 { Pic\ iousK I'lesented) \ ke\ mg method m an en\ nonnient ha'> mg a phirahtx of use; s , 
eacii user bt-mg capable of storing a sa of kcx s that enable secure c<wimLmfcatf!>n am<.>ng sets of 
said {ilufalu\ of use! s, compiismg 

(a) dtsttdntung fust fnlonnatiun that enabies users to update aJk'i e\ ictton ol am oi 
moie users, a set of compromised ke\ s That aie known to satd one oi more users ^\ ithout 
TCcetving ntw kt> tntoimatjon, 

\shereu-) satd update docs not tnciude new sectel tnfoimaunij 

2^^ (Ongmal ) I he method of clami 2S whesem said tli'^t jntbimatum inchides mform^uon 
ihai enables idcnnfication of a one-was functKKt 

lO (OjigiUdl) ihe nietlmd of clami 2S, v\hfiem ^.nd tltst inloinuitioii includes mfonnation 
that enables identification of said evicted one or more users. 

3 1.-37. (Cancelled) 

38. ( Previously Presented) A secret sharing system, comprising: 
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a ke\ tliat di^tiibutes Secret iiifpTfUdtion to a plurdUt\ of u-^ess, vxhea'in each li^cr is 

scut secret'^ lhaf aie shared b\ {esp£;cti\t' sets oi'saui piuralin oftisers, safti kcv sen or beniii 
operans e to uptiitc at least oot- compronnseti scciei known b\ at least one t;\ ieted use; using .it 
lea.st otit* non-c<.>!npromist*(i st-cfct that is not known hy said at Seast one evicted uscf 

u herein saui update dot-s tiot jneludc neu secret nUoinutton 

3^ (Pre\'iuiisl\ [*resefUed) A computer progr'am prutiuct, comprising 

c(imputcr-rcadah!e prtiuiam code for causing a coniputei, in an enxironmcni thai includes 
a piuja!ii> of users, uhereni eacli ust-s possesses seciets that are shait-d b> jespeetnc sets of sard 
pluiahts oftisojs, to update at least t)nc cornproniiseJ secict kno\^n b\' at least one extcted user 
using at ieast one noft-eompronHsed sectet that is not kno\sn b\ said at least one e\ icted user, 
a«d 

a computet -usable medium configured to store the computer-readable program codes, 
\shefein satd update does not include nvw secret inibrmation 

4(t {Pi-e\iousl\ Ihesented) The tneihod ofelaim 1 \s herein satd r\on-con\piotiused secret 
utiiizcd toi said updating is known by all users rn said plurality ot users and is not known b\ said 
at least one evicted liser. 

41 , (Previously Presented) Tlte method of claim 40, wherei n a single non-compromised 
secret is utilized to update a plurality of compromised secrets by using a one-way function with 
inputs of said single non-compromised secret aiid said non-compromised secret. 
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IX EVIDENCE APPENDIX (37 CF.R. § 41.37{c){l)(ix)) 

There is no such evidence. 
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X RELATED PROCEEDING APPENDIX (37 C.F.R. § 4l.37(c)(l){s:)) 

N/A 
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